feat(cra): readiness derives obligations from Machinery Reg 2023/1230 too

Machine/plant builders are hit by BOTH the CRA and the new Machinery Regulation.
New machinery_reg_cyber.py models its two well-corroborated Annex III cyber-with-
safety essential requirements (1.1.9 protection against corruption, 1.2.1 control-
system safety incl. foreseeable manipulation) in our own words; EU legal text is
freely reusable (Commission Decision 2011/833/EU, source acknowledged), harmonised
standards referenced by identifier only. The readiness check asks "is it
machinery?" and, if so, adds these obligations tagged "Maschinen-VO" alongside the
CRA ones — the combination is visible (regulations list + per-item source badge).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

admin-compliance/app/sdk/cra/_components/ReadinessCheck.tsx

@@ -10,12 +10,14 @@ interface GuidelineItem {
   severity: string
   effort_days?: number
   measures: { id: string; name: string }[]
+  source?: string
 }
 interface ReadinessResult {
   in_scope: boolean
   classification: string
   rationale: string[]
   conformity_path_hint: string
+  regulations: string[]
   guideline: { code: GuidelineItem[]; process: GuidelineItem[]; document: GuidelineItem[] }
   counts: { code: number; process: number; document: number }
   total_effort_days: number
@@ -52,6 +54,7 @@ export function ReadinessCheck({ onCreateProject }: { onCreateProject?: () => vo
   }
 
   const QUESTIONS: { k: string; label: string }[] = [
+    { k: 'is_machinery', label: 'Ist es eine Maschine/Anlage (CE nach Maschinenrecht)?' },
     { k: 'connected_to_internet', label: 'Hängt das Produkt am Internet (oder soll es)?' },
     { k: 'user_parameter_app', label: 'Gibt es eine App, mit der Nutzer Parameter einstellen?' },
     { k: 'remote_maintenance', label: 'Bietet ihr Fernwartung an?' },
@@ -110,6 +113,12 @@ export function ReadinessCheck({ onCreateProject }: { onCreateProject?: () => vo
                 </span>
                 <span className="text-xs text-gray-500">· Konformität: {result.conformity_path_hint}</span>
               </div>
+              <div className="flex flex-wrap items-center gap-1 mb-1">
+                <span className="text-xs text-gray-500">Betroffene Verordnungen:</span>
+                {result.regulations.map((r) => (
+                  <span key={r} className="rounded px-1.5 py-0.5 text-[10px] font-medium bg-blue-100 text-blue-700 dark:bg-blue-900/40 dark:text-blue-300">{r}</span>
+                ))}
+              </div>
               <p className="text-xs text-gray-500 mb-3">
                 {result.counts.code + result.counts.process + result.counts.document} Pflichten · grobe Schätzung
                 ~{result.total_effort_days} Personentage. Das ist ein Überblick zur Klärung — keine Rechtsberatung.
@@ -124,6 +133,9 @@ export function ReadinessCheck({ onCreateProject }: { onCreateProject?: () => vo
                     <ul className="mt-2 space-y-1.5">
                       {result.guideline[b.key].map((it) => (
                         <li key={it.req_id} className="text-[11px] text-gray-600 dark:text-gray-300">
+                          {it.source === 'Maschinen-VO' && (
+                            <span className="inline-block rounded bg-indigo-100 text-indigo-700 dark:bg-indigo-900/40 dark:text-indigo-300 px-1 py-0.5 text-[9px] font-medium mr-1">MaschVO</span>
+                          )}
                           <span className="font-medium text-gray-800 dark:text-gray-200">{it.title}</span>
                           <span className="text-gray-400"> · {it.annex_anchor}</span>
                           {it.measures.length > 0 && (